Vulnerabilities (CVE)

Filtered by vendor Wpindeed Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-43240 1 Wpindeed 1 Ultimate Membership Pro 2024-09-06 N/A 9.8 CRITICAL
Improper Privilege Management vulnerability in azzaroco Ultimate Membership Pro allows Privilege Escalation.This issue affects Ultimate Membership Pro: from n/a through 12.6.
CVE-2024-43242 1 Wpindeed 1 Ultimate Membership Pro 2024-09-06 N/A 10.0 CRITICAL
Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6.
CVE-2023-26516 1 Wpindeed 1 Debug Assistant 2024-02-28 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.
CVE-2023-26527 1 Wpindeed 1 Debug Assistant 2024-02-28 N/A 4.8 MEDIUM
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.